Your data and privacy

Browser ponds and desktop saves

Fish, markings, names, notes, settings and layouts are stored in this browser’s site data. The homepage demonstration is not saved. Desktop apps use separate saves; the website does not automatically read or overwrite them. Signing in or out does not automatically upload or delete the browser pond. Export a copy before clearing site data or changing browsers.

Clerk sign-in

When account sign-in is available, Clerk handles the information you submit to create an account, verify your email and manage a sign-in session. Hushpond uses the verified account identifier and available verified email to authorize account operations. A login entry alone is not proof that cloud backup is enabled. Hushpond does not keep a copy of your Clerk password. Clerk processes sign-in data for Hushpond under its service and data-processing terms; this Hushpond notice covers the account data we use. Clerk’s own privacy notice has a separate scope.

Cloudflare D1 and cloud backup

The account and cloud backup service uses Cloudflare Workers and a dedicated Cloudflare D1 database. It stores account identifiers, membership and order status, and related support records. When you manually back up your pond, it stores the authorized snapshot and its revision; a snapshot can contain fish, artwork, names, notes and layouts. You can restore a saved version through the account controls. Visiting the website or signing in does not automatically upload a pond or synchronize it across devices.

Creem payments

When you choose to use Creem checkout, Creem processes purchase and billing information, such as your email, billing address, payment details and order. Hushpond sends the purchase email, selected product and order/account reference needed to link the order, and receives transaction and subscription status to manage membership and support. Hushpond does not receive full card numbers or card security codes. Creem’s privacy notice applies to its processing.

Cookies and local preferences

The language preference cookie contains a language code and can remain for up to one year. It does not contain the pond or sign-in credentials, and changing language does not rewrite the pond. If sign-in is enabled, Clerk also uses session-related storage described by its notice. On a shared device, sign out and protect any exported pond files; signing out leaves the local pond intact.

Hosting and website requests

Vercel hosts the website and Cloudflare provides network and API infrastructure. Loading pages sends ordinary request information, including an IP address, to these providers. Their privacy notices describe their processing. Hushpond does not load an external analytics SDK. Its optional first-party measurement is described below.

Optional measurement and creator referrals

When enabled, you may choose usage measurement and retaining a creator referral on this site separately. Measurement stores a random browser-session identifier, limited campaign labels, referring hostname, event type and time. A purchase can link its order and account reference to that session. Events do not include pond contents, fish names, notes, email or complete page URLs. Session access expires after 30 days; expired measurement records are removed during service housekeeping or subsequent measurement requests. Only the configured authenticated owner can read aggregate reports. Privacy choices lets you stop local collection and request deletion of that session and its events. Payment records remain for membership and billing. Approved referral codes can be sent to Creem checkout; Creem handles its own referral storage and commission processing under its notices. Withdrawal does not reverse a completed purchase or platform commission. Refusing optional measurement does not block ordinary pond use.

Support, access and deletion requests

If you contact support, your email address and the information you send are used to answer and investigate the request. Do not send passwords, authentication secrets or full payment-card details. You can export or clear the current browser pond in the app or browser controls. For account access, correction or deletion requests when accounts are enabled, contact support; identity may need to be verified and legally required transaction records may need to be retained. No fixed deletion deadline or permanent cloud retention is promised by this notice.

Privacy choices